High
CVE-2026-67422
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 738
Reset filters
Medium
CVE-2026-70484
Open WebUI: Users denied the image-generation permission can still generate images via chat completions
Medium
CVE-2026-70481
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
High
CVE-2026-70646
aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler
Medium
CVE-2026-54785
gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode
Critical
CVE-2026-67429
Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)
High
CVE-2026-54574
`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive
High
CVE-2026-67425
Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
Critical
CVE-2026-67426
Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration
High
CVE-2026-55415
datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements
High
CVE-2026-54655
`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator
High
CVE-2026-55404
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output
Medium
CVE-2026-59225
Open WebUI: Arena task endpoints can bypass underlying model access controls
High
CVE-2026-59221
open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
High
CVE-2026-54635
pytonapi has a Webhook Custom Path Authentication Bypass
High
CVE-2026-59216
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
Medium
CVE-2026-59220
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
High
CVE-2026-59214
Open WebUI: Stored web worker XSS via Pyodide
High
CVE-2026-69097
GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)
High
CVE-2026-59200
Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
Medium
CVE-2026-59198
Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
High
CVE-2026-54549
meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch
High
CVE-2026-54547
meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
High
CVE-2026-54234
vLLM has Remote DoS via Invalid Recovered Token Reinjection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.